Oxalis Academy Privacy Policy

Privacy Policy

Last updated: November 2025

Legal

Oxalis Academy Privacy Policy

This policy explains how we collect, use, store, share, and protect personal data for students, families, staff, and website visitors.

1. Who we are

Oxalis Academy, Av. Marechal Carmona, 903, 2750-642 Cascais, Portugal. Phone: +351 933 505 439. Email: admin@oxaliseducation.com. For privacy-related questions, contact admin@oxaliseducation.com.

2. What personal data we collect

We may collect student identity/contact details, parent or guardian details, academic records, attendance and assessment data, relevant learning/medical/wellbeing information, billing/payment information, communications, website usage data (including analytics/cookies), and online learning platform activity.

3. How we use personal data

We use personal data to process applications, deliver education services, monitor progress, communicate with families, provide reports/invoices/updates, support safeguarding and learning needs, support exam processes, improve services, and comply with legal/regulatory obligations.

4. Legal basis for processing

Depending on context, processing is based on contract performance, legitimate interests, legal obligations, vital interests/welfare, or consent (for specific optional processing such as certain marketing/media/cookies). Where consent is used, it may be withdrawn.

5. Children's data

Many students are under 18. Oxalis Academy applies additional care to children’s personal data. Where consent is required for child data, consent may be required from a parent or legal guardian.

6. Who we share data with

Data may be shared where necessary with teachers/tutors/admin staff, education technology providers, exam boards/centres/partners, payment/accounting/professional advisers, IT/hosting/analytics providers, and legal/regulatory/safeguarding authorities when required. We do not sell personal data.

7. International transfers

Some providers may process data outside Portugal/EEA. Where this occurs, we apply appropriate lawful safeguards (for example contractual protections or other permitted transfer mechanisms).

8. How long we keep personal data

Data is retained only as long as necessary for the purposes in this policy. Some records (academic, enrolment, financial, safeguarding) may be retained longer for legal, regulatory, educational, or legitimate record-keeping reasons.

9. How we protect personal data

We use appropriate technical and organisational security measures, including access controls, secure systems, confidentiality obligations, and safeguards against loss, misuse, unauthorised access, or disclosure.

10. Your rights

Subject to applicable law, you may have rights to access, rectify, erase, restrict/object, transfer data, withdraw consent, and lodge a complaint. In Portugal, the relevant supervisory authority is CNPD (Comissão Nacional de Proteção de Dados).

11. Marketing communications

We may send relevant updates where we have a lawful basis. You can unsubscribe or opt out at any time by contacting admin@oxaliseducation.com.

12. Updates to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on the website with the updated date.